Lucene search
+L

8170 matches found

osv_rhsa
osv_rhsa
•added 2024/09/13 10:11 a.m.•17 views

RHSA-2015:0118 Red Hat Security Advisory: mariadb security update

Bulletin has no description...

7.5CVSS7.4AI score0.10066EPSS
SaveExploits0References33
osv_rhsa
osv_rhsa
•added 2024/09/13 10:11 a.m.•21 views

RHSA-2015:0117 Red Hat Security Advisory: mariadb55-mariadb security update

Bulletin has no description...

7.5CVSS7.4AI score0.10066EPSS
SaveExploits0References33
osv_rhsa
osv_rhsa
•added 2024/09/13 9:20 a.m.•20 views

RHSA-2014:1862 Red Hat Security Advisory: mariadb55-mariadb security update

Bulletin has no description...

6.8CVSS6.3AI score0.14784EPSS
SaveExploits3References82
osv_rhsa
osv_rhsa
•added 2024/09/13 9:20 a.m.•18 views

RHSA-2014:1940 Red Hat Security Advisory: mariadb-galera security update

Bulletin has no description...

6.8CVSS6.3AI score0.14784EPSS
SaveExploits3References80
osv_rhsa
osv_rhsa
•added 2024/09/13 9:20 a.m.•17 views

RHSA-2014:1937 Red Hat Security Advisory: mariadb-galera security update

Bulletin has no description...

6.8CVSS6.3AI score0.14784EPSS
SaveExploits3References80
osv_rhsa
osv_rhsa
•added 2024/09/13 9:20 a.m.•17 views

RHSA-2014:1861 Red Hat Security Advisory: mariadb security update

Bulletin has no description...

6.8CVSS6.3AI score0.14784EPSS
SaveExploits3References82
osv_rhsa
osv_rhsa
•added 2024/09/13 8:52 a.m.•19 views

RHSA-2014:0522 Red Hat Security Advisory: mariadb55-mariadb security update

Bulletin has no description...

6.5CVSS5.6AI score0.05059EPSS
SaveExploits0References35
osv_rhsa
osv_rhsa
•added 2024/09/13 8:51 a.m.•19 views

RHSA-2014:0189 Red Hat Security Advisory: mariadb55-mariadb security update

Bulletin has no description...

7.5CVSS6.6AI score0.06353EPSS
SaveExploits0References54
RedHat Linux
RedHat Linux
•added 2024/09/05 2:13 p.m.•14 views

python-social-auth: Improper Handling of Case Sensitivity in social-auth-app-django

A flaw was found in social-auth-app-django. In affected versions of this package, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match...

4.9CVSS5.7AI score0.00581EPSS
SaveExploits0References5
NVD
NVD
•added 2024/09/02 6:15 p.m.•40 views

CVE-2024-45308

HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc 1 with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existing notes. The affected existing note can then not be accessed anymore and is effectively hidden by t...

6.5CVSS0.00551EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/09/02 4:40 p.m.•21 views

CVE-2024-45308 MySQL & free URL mode allows to hide existing notes in hedgedoc

HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc 1 with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existing notes. The affected existing note can then not be accessed anymore and is effectively hidden by t...

6.5CVSS7AI score0.00551EPSS
SaveExploits1References2
Mend
Mend
•added 2024/09/02 4:40 p.m.•4 views

CVE-2024-45308

HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc 1 with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existing notes. The affected existing note can then not be accessed anymore and is effectively hidden by t...

8.3CVSS0.00551EPSS
SaveExploits1References4
CVE
CVE
•added 2024/09/02 4:40 p.m.•81 views

CVE-2024-45308

HedgeDoc (the HedgeDoc project) contains a vulnerability affecting deployments using MySQL or MariaDB where an alias can be created equal to the ID of an existing note. The new note’s alias hides the original note and, in freeURL mode, can be created by users with appropriate permissions or, depe...

6.5CVSS6.5AI score0.00551EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2024/09/02 4:40 p.m.•42 views

CVE-2024-45308 MySQL & free URL mode allows to hide existing notes in hedgedoc

HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc 1 with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existing notes. The affected existing note can then not be accessed anymore and is effectively hidden by t...

6.5CVSS0.00551EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2024/09/02 4:40 p.m.•30 views

CVE-2024-45308 MySQL & free URL mode allows to hide existing notes in hedgedoc

HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc 1 with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existing notes. The affected existing note can then not be accessed anymore and is effectively hidden by t...

6.5CVSS6.7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/02 12:00 a.m.•6 views

CVE-2024-45308: Improper Validation of Unsafe Equivalence in Input

HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc 1 with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existing notes. The affected existing note can then not be accessed anymore and is effectively hidden by t...

6.5CVSS5.7AI score0.00551EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/02 12:00 a.m.•27 views

PT-2024-31561 · Oracle +1 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: HedgeDoc versions prior to 1.10.0 Description: HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existi...

6.5CVSS7.1AI score0.00551EPSS
SaveExploits1References8
Packet Storm
Packet Storm
•added 2024/09/01 12:00 a.m.•544 views

MySQL Authentication Bypass Password Dump

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/proto/mysql/client' class MetasploitModule 'MySQL Authentication Bypass Password Dump', 'Description' = %Q This module exploits a password bypass...

5.1CVSS7AI score0.965EPSS
SaveExploits13
Tenable Nessus
Tenable Nessus
•added 2024/08/28 12:00 a.m.•23 views

SUSE SLES15: libmariadbd-devel / libmariadbd19 / mariadb / mariadb-client / etc (SUSE-SU-2024:3018-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3018-1 advisory. - Updated to 10.5.26 - Updated to 10.5.25: - CVE-2024-21096: Fixed a vulnerability that would allow unauthenticated attacker with logon to t...

4.9CVSS6.7AI score0.00424EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/08/28 12:00 a.m.•15 views

openSUSE: Security Advisory for mariadb (SUSE-SU-2024:3018-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.9CVSS5.9AI score0.00424EPSS
SaveExploits0References2
Rows per page
Query Builder